În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware
GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The investigated cluster spans Visual Studio Marketplace and Open VSX, showing how appearance changes can provide cover for code that runs on developer machines. The campaign first surfaced in October 2025 and has since expanded across […] The post GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware appeared first on Cyber Security News.
GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The investigated cluster spans Visual Studio Marketplace and Open VSX, showing how appearance changes can provide cover for code that runs on developer machines. The campaign first surfaced in October 2025 and has since expanded across development platforms. Earlier reporting on developer tools spreading GlassWorm describes credential theft and persistent access, risks that make compromised developer workstations valuable gateways into repositories, cloud environments, and other sensitive resources. Researchers from Socket.dev identified four Marketplace extensions and six Open VSX identities linked to the theme cluster. Socket.dev said in a report shared…
Extras afișat conform termenilor RSS ai publicației · 109 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Kimsuky Operation GitPower Uses GitHub to Deliver Malware and Steal Data
Cybersecurity News · 13 oct. 2026
Fake PDF Files Hide Konni Malware Campaign Targeting Ukraine Organizations
Cybersecurity News · 24 sept. 2026
Top 10 Malware Used by Hackers Last Week to Launch Cyberattacks
Cybersecurity News · 21 iul. 2026
Research Note: Filtering Subversion-Relevant Information From Pretraining Data Is Feasible
LessWrong · 5 oct. 2026